# New Attack Method Exposes Ongoing Spectre Vulnerabilities in Intel and AMD Processors! ⚠️

**URL:** <https://onehack.st/t/new-attack-method-exposes-ongoing-spectre-vulnerabilities-in-intel-and-amd-processors/294024>\
**Category:** News & Articles\
**Tags:** programming, hacking\
**Created:** [October 19, 2024, 7:01pm UTC](https://onehack.st/t/new-attack-method-exposes-ongoing-spectre-vulnerabilities-in-intel-and-amd-processors/294024 "2024-10-19T19:01:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [October 19, 2024, 7:01pm UTC](https://onehack.st/t/new-attack-method-exposes-ongoing-spectre-vulnerabilities-in-intel-and-amd-processors/294024/1 "2024-10-19T19:01:56Z")

</div>

**Summary:**

1. **Persistent Spectre Vulnerabilities**  
Six years after the discovery of **Spectre** vulnerabilities, researchers from **ETH Zurich** have identified a new cross-process attack that exposes weaknesses in **Intel** and **AMD** processors.

2. **Details of the Attack**  
The researchers revealed that their method derandomizes **Address Space Layout Randomization** (ASLR) and can leak sensitive information, including the hash of the root password, from Intel processors.

3. **Ineffective Defense Measures**  
The **Indirect Branch Predictor Barrier** (IBPB), designed to protect against Spectre v2 attacks, has been improperly implemented, allowing attackers to bypass security protocols between process contexts and virtual machines.

4. **Affected Hardware**  
The vulnerabilities impact recent Intel microarchitectures, such as **Golden Cove** and **Raptor Cove** , as well as **AMD** processors built on the **Zen 2 architecture** , particularly for Linux users.

5. **Microcode Updates and Recommendations**  
Intel released a microcode patch (INTEL-SA-00982) in March 2024, but not all affected hardware may have received it. AMD has acknowledged the issue as a software bug and is working with Linux kernel maintainers to develop a fix.

**Read more at:** [The Register](https://www.theregister.com/2024/10/18/spectre_problems_continue_amd_intel/)